Access-Control-Allow-Headers

HTTP response header

The Access-Control-Allow-Headers response header is used in response to a preflight request which includes the Access-Control-Request-Headers to indicate which HTTP headers can be used during the actual request. This header is required if the request has an Access-Control-Request-Headers header

Header usage statistics

Access-Control-Allow-Headers response header information and usage statistics.
Websites using header Access-Control-Allow-Headers587,853
Percentage of websites that use Access-Control-Allow-Headers header0.73%
Total discovered header valuesMore than 10,000
Header uses directivesYes
Header values are unique or randomNo
Most popular in the country United States

Access-Control-Allow-Headers directives (18 total)

  • *
  • accept
  • access_token
  • authorization
  • cache-control
  • client-security-token
  • content-type
  • dnt
  • if-modified-since
  • keep-alive
  • origin
  • soapaction
  • typeform-version
  • user-agent
  • x-accept-charset
  • x-customheader
  • x-requested-with
  • x-typeform-key

Access-Control-Allow-Headers Directives

Access-Control-Allow-Headers directives value information and usage statistics
DirectiveShareWebsites countUnique Values
content-type77.85%457,6601
x-requested-with53.12%312,2512
authorization35.28%207,4161
origin34.18%200,9431
accept27.16%159,6841
cache-control13.96%82,0851
if-modified-since12.86%75,5841
*12.59%74,0271
user-agent11.84%69,6031
dnt10.32%60,6451
keep-alive7.23%42,4771
x-customheader3.81%22,4171
client-security-token2.38%13,9881
soapaction1.48%8,6991
x-accept-charset0.99%5,8281
typeform-version0.35%2,0311
x-typeform-key0.35%2,0311
access_token<0.1%4661

Connected technologies

Technologies that utilize the header
Tealeaf, category Analytics, total 646 websites
Ckan, category Content Management System, total 536 websites

Access-Control-Allow-Headers header usage distribution by website rank



Geographical Distribution

Header usage distribution by websites across the globe.



Websites utilizing Access-Control-Allow-Headers

List of websites that use Access-Control-Allow-Headers header
DomainCountryRankContacts
static.parastorage.com United States31
siteassets.parastorage.com United States34
schema.org United States64
www.godaddy.com United States97
www.namecheap.com United States112
support.apple.com United States131
See full domain list

Common header values

List of top common Access-Control-Allow-Headers header values
Header valueValue prevalence
*11.85%
origin, x-requested-with, content-type10.31%
content-type8.09%
Content-Type, Authorization6.46%
Origin, X-Requested-With, Content-Type, Accept4.19%
X-Requested-With2.83%
DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range2.14%
x-requested-with,content-type2.13%
accept, x-request, x-requested-with1.66%
Origin, X-Requested-With, Content-Type, Accept, Authorization1.63%
x-requested-with, Content-Type, origin, authorization, accept, client-security-token1.44%
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type1.34%
Authorization, Content-Type1.34%
Content-Type, soapaction1.31%
Content-Type,Accept1.19%
Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-Requested-With1.12%
Authorization1.02%
Content-Type, Authorization, X-Requested-With1.00%
Origin, Authorization, Content-Type0.99%
X-Accept-Charset,X-Accept,Content-Type0.83%